Use tokens instead of password

GitHub has introduced personal access tokens, which are a little safer than using passwords as while they do have full access to your account, they can be revoked if necessary. They're used via [basic authentication](http://developer.github.com/v3/auth/#basic-authentication) with the token as the username and the password left blank. This PR switches to using personal access tokens.